Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
225001 7.5 危険 Lianja - Lianja SQL Server の db_netserver におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-3563 2013-07-8 14:27 2013-07-4 Show GitHub Exploit DB Packet Storm
225002 4.3 警告 シスコシステムズ - Cisco Identity Services Engine 上で稼働する administration/monitoring パネルにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-3413 2013-07-8 14:25 2013-07-3 Show GitHub Exploit DB Packet Storm
225003 7.5 危険 Mozilla Foundation - Mozilla Firefox および Thunderbird の PreserveWrapper の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-1694 2013-07-8 11:06 2013-06-25 Show GitHub Exploit DB Packet Storm
225004 10 危険 マイクロソフト
アドビシステムズ
Google
- Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2013-3343 2013-07-8 10:42 2013-06-11 Show GitHub Exploit DB Packet Storm
225005 7.2 危険 Linux - Linux Kernel の kernel/events/core.c における権限を取得される脆弱性 CWE-189
数値処理の問題
CVE-2013-2094 2013-07-5 11:44 2013-04-25 Show GitHub Exploit DB Packet Storm
225006 5 警告 Mozilla Foundation - Mozilla Firefox の国際化ドメイン名表示アルゴリズムにおけるアドレスバーを偽装される脆弱性 CWE-310
暗号の問題
CVE-2013-1699 2013-07-5 11:05 2013-06-25 Show GitHub Exploit DB Packet Storm
225007 5 警告 レッドハット - Red Hat Enterprise Virtualization Manager におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-2144 2013-07-5 11:05 2013-06-10 Show GitHub Exploit DB Packet Storm
225008 4.3 警告 Mozilla Foundation - Mozilla Firefox の getUserMedia 許可の実装におけるカメラやマイクへのアクセスを許可させる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-1698 2013-07-5 11:04 2013-06-25 Show GitHub Exploit DB Packet Storm
225009 5 警告 Mozilla Foundation - Mozilla Firefox におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-1695 2013-07-5 11:03 2013-06-25 Show GitHub Exploit DB Packet Storm
225010 4 警告 Mozilla Foundation - Mozilla Firefox におけるクリックジャッキング攻撃を実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-1696 2013-07-5 11:02 2013-06-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1911 8.1 HIGH
Network
- - Windmill prior to 1.703.2 contains an incorrect default permissions vulnerability in nsjail sandbox configuration files where /etc is bind-mounted without read-write restrictions, allowing authentica… CWE-276
Incorrect Default Permissions 
CVE-2026-47107 2026-05-20 22:16 2026-05-20 Show GitHub Exploit DB Packet Storm
1912 7.3 HIGH
Network
- - Offline Hospital Management System 5.3.0 allows remote code execution due to an improper Electron renderer configuration. The application enables Node.js integration while disabling context isolation… CWE-917
 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')
CVE-2026-26462 2026-05-20 22:16 2026-05-19 Show GitHub Exploit DB Packet Storm
1913 - - - A Remote Code Execution vulnerability in P4 (Helix Core) Server's Command-Line Client, prior to the 2025.2 Patch 2, has been fixed to address potential security risks. CWE-94
Code Injection
CVE-2026-6902 2026-05-20 16:16 2026-05-18 Show GitHub Exploit DB Packet Storm
1914 - - - Rapid7 Metasploit Pro is vulnerable to a local privilege escalation attack that allows a user to gain SYSTEM level control of a Windows host. When started the metasploitPostgreSQL service would start… CWE-284
CWE-427
CWE-829
Improper Access Control
 Uncontrolled Search Path Element
 Inclusion of Functionality from Untrusted Control Sphere
CVE-2026-7373 2026-05-20 08:16 2026-05-15 Show GitHub Exploit DB Packet Storm
1915 9.1 CRITICAL
Network
adenhq hive A vulnerability was found in adenhq hive up to 0.11.0. This affects the function _read_events_tail of the file core/framework/server/routes_sessions.py of the component Delete Request Handler. Perfor… CWE-22
Path Traversal
CVE-2026-8757 2026-05-20 06:26 2026-05-17 Show GitHub Exploit DB Packet Storm
1916 6.5 MEDIUM
Network
kilo kilo_code A vulnerability was detected in Kilo-Org kilocode up to 7.0.47. This vulnerability affects the function Bun.file of the file packages/opencode/src/kilocode/review/worktree-diff.ts of the component Fi… CWE-22
Path Traversal
CVE-2026-8765 2026-05-20 06:21 2026-05-18 Show GitHub Exploit DB Packet Storm
1917 5.3 MEDIUM
Network
- - In the AWS Secrets Manager and SSM Parameter Store secrets backends of `apache-airflow-providers-amazon` prior to 9.28.0, the team-scoping logic could resolve a `conn_id` containing a `/` (e.g. `"my_… CWE-863
 Incorrect Authorization
CVE-2026-42526 2026-05-20 06:16 2026-05-20 Show GitHub Exploit DB Packet Storm
1918 8.7 HIGH
Local
- - JWT tokens that were used by workers in Kubernetes Executors have been exposed to users who had read only access to Kuberentes Pods. This could allow users with just read-only access to perform actio… CWE-538
 File and Directory Information Exposure
CVE-2026-27173 2026-05-20 06:16 2026-05-20 Show GitHub Exploit DB Packet Storm
1919 - - - Discourse is an open-source discussion platform. In versions prior to 2026.1.4, 2026.3.1, 2026.4.1 and 2026.5.0-latest.1, a vulnerability in the discourse-subscriptions plugin allows users to gain a… CWE-862
 Missing Authorization
CVE-2026-34154 2026-05-20 06:08 2026-05-20 Show GitHub Exploit DB Packet Storm
1920 5.9 MEDIUM
Network
- - LIVE555 before 2026.04.22 contains an authorization bypass vulnerability in RTSP session command handling that allows attackers to replay valid Session tokens from unauthenticated connections. Attack… CWE-863
 Incorrect Authorization
CVE-2026-41470 2026-05-20 06:08 2026-05-20 Show GitHub Exploit DB Packet Storm